This vulnerability involves a use-after-free condition in the Accessibility feature of Google Chrome before version 148.0.7778.216. Exploitation requires that an attacker already control the renderer process, after which they could leverage this flaw to escape the browser sandbox, potentially leading to full system compromise. The CVSS vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker to escape the Chrome sandbox, which significantly increases the potential impact by enabling further system-level attacks beyond the browser process. This could lead to full compromise of the affected system's confidentiality, integrity, and availability. However, exploitation requires prior compromise of the renderer process and user interaction.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html for current remediation guidance. Since this is a client-side vulnerability in Chrome, updating to version 148.0.7778.216 or later when available is recommended. No other specific mitigations are indicated in the provided data.